This data protection retention schedule outlines the duration for which varying categories of personal data will be held, the purpose of the processing, the format by which it is stored and the legal basis for processing this data.

This policy outlines how an organisation deals with personal data and explains the organisation’s approach to making a subject access request, and how the organisation ensures compliance with General Data Protection Regulation (GDPR) in relation to the handling of personal data in this regard.

This notice informs an employee on how the organisation collects and processes sensitive personal information.

This privacy notice should be available to all contractors. This policy outlines how the organisation will collect and process an applicants data in line with GDPR and the Data Protection Act 2018.

This privacy notice should be available to all job candidates. This policy outlines how the organisation will collect and process an applicants data in line with GDPR and Data Protection Act 2018.

This privacy notice should be given to all employees. It outlines how the organisation collects and processes personal data relating to its employees to manage the employment relationship.

This policy outlines the employers responsibilities in dealing with Data in the workplace in line with GDPR and the Data Protection Act 2018.

This letter can be sent to an individual who has

This form can be used to request consent of a

This form seeks consent of former employees for the employer

This form seeks consent of new employees for the employer

This form seeks consent of existing employees for the employer

This form seeks consent from an employee for the employer

This form seeks consent from an employee for an employer

This privacy notice should be available to all job candidates.

This privacy notice should be given to all employees. It

This clause should be inserted into a contract of employment. This clauses informs an employee who their information Is processes.

This clause can be inserted into a contract of employment when employer monitors the communication structures within the organisation.

This letter can be sent to an employee’s GP when the employer has obtained consent from the employee to contact the GP directly to obtain a medical opinion on the employee.

This letter can be sent to an employee when an employer wishes to obtain their consent to access a medical report on the employee. This letter should be sent to accompany the Consent form to obtain a medical report.

This guide provides information on how an employer can remain compliant with data protection

This form should be completed by an individual who wishes to have data erased about them. This form requests the employee to let the employer know the reasons for the deletion, the data to be deleted and any supporting information.

This form should be completed by individuals who wish to have incorrect data in relation to them rectified. This form outlines the data the employee wishes to have rectified and what they request it is amended to.

This form should be completed by an individual who wishes to complete a SARS. This form outlines the information the employee requests and who they should return the form too.

This form should be completed whenever the organisation is considering processing personal information of its employees. This firm will identify the impact of the processing and if it is necessary and compliant with GDPR and The Data Protection Act 2018.

This letter responds to an individuals request for erasure of their data refusing the request. The letter outlines the reasons for refusal such as the request is excessive or manifestly unfounded.

This letter responds to an individual who has requested the erasure of data relating to them. This letter confirms that the employer is willing to comply with the request but they need additional time due to the complexity of the information requested.

This letter responds to an individual who has requested the erasure of data relating to them. This letter confirms that the employer is willing to comply with the request but they need further information.

This letter responds to an individual who has requested the erasure of data relating to them. This letter confirms that the employer has completed this request.

This letter responds to an individual who has requested their data is rectified. This letter refuses the request as it is either excessive or unfounded.